I recently read about a California ruling that prohibits most offline merchants from collecting ZIP codes for credit card transactions. According to the LA Times:
“The high court determined that ZIP Codes were "personal identification information" that merchants can't demand from customers under a state consumer privacy law.”
One justice was more specific about the ruling, saying that the privacy law in question was intended to prohibit retailers from collecting and storing consumer information that wasn't necessary to the transaction.
The attorney who brought the law suit took the implications further saying that, “the decision would help protect consumers from credit card fraud and identity theft.”
So there are actually 2 issues here:
1) The collection of non-essential data
2) Security problems that facilitate the use of the data for illegal purposes
The marketing and privacy discussion is full of complex issues being conflated in similar ways. Even terms like “consumer data” and “privacy” are so loaded that there are conversations between parties using the same words, but not talking about the same thing.
Most marketers are interested in data that gives them a better understanding of their audiences overall. Generally, we’re not talking about marketers collecting the kind of personal information on your credit report — complete address, bank accounts, etc. Most of you reading this post are well acquainted with this distinction, but are consumers? I suspect most aren’t.